rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3644/1:b..l P3645/1:b..l P47/1:b..l (detected by 1, t=10502 jiffies, g=19133, q=119 ncpus=2) task:kworker/u4:3 state:R running task stack:26872 pid:47 ppid:2 flags:0x00004000 Workqueue: netns cleanup_net Call Trace: context_switch kernel/sched/core.c:5194 [inline] __schedule+0xbd2/0x55b0 kernel/sched/core.c:6506 preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:6818 irqentry_exit+0x31/0x80 kernel/entry/common.c:432 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:check_kcov_mode kernel/kcov.c:173 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x7/0x60 kernel/kcov.c:207 Code: 34 00 5d be 03 00 00 00 e9 86 2f 9e 07 66 0f 1f 44 00 00 48 8b be a8 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 65 8b 05 39 db 85 7e <89> c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b 14 25 80 6f 02 00 a9 RSP: 0018:ffffc90000b87b38 EFLAGS: 00000202 RAX: 0000000080000000 RBX: 0000000000000001 RCX: ffffffff87b5e747 RDX: ffff888011beba80 RSI: 0000000000000000 RDI: 0000000000000001 RBP: 00000000000330c9 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 1ffff1100f264b82 R12: ffffffff8da42cc0 R13: ffffc90000b87ca0 R14: 000000000000000a R15: dffffc0000000000 inet_twsk_purge+0x135/0x7d0 net/ipv4/inet_timewait_sock.c:270 ops_exit_list+0x125/0x170 net/core/net_namespace.c:168 cleanup_net+0x4ea/0xb00 net/core/net_namespace.c:595 process_one_work+0x9bf/0x1710 kernel/workqueue.c:2289 worker_thread+0x665/0x1080 kernel/workqueue.c:2436 kthread+0x2e4/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 task:syz-executor.0 state:R running task stack:25072 pid:3645 ppid:3634 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5194 [inline] __schedule+0xbd2/0x55b0 kernel/sched/core.c:6506 preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:6818 irqentry_exit+0x31/0x80 kernel/entry/common.c:432 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:__reset_page_owner+0xa8/0x180 mm/page_owner.c:156 Code: ee bf 1f 00 00 00 e8 27 2f ab ff 66 41 83 fd 1f 0f 87 dd f9 78 07 e8 67 32 ab ff 44 89 e6 89 df e8 ad 2e ab ff 44 39 e3 7c 20 53 32 ab ff 48 89 ef e8 1b 87 01 00 48 83 c4 18 5b 5d 41 5c 41 RSP: 0018:ffffc90004b9fa18 EFLAGS: 00000246 RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81d161a3 RDX: ffff88801f9d0000 RSI: 0000000000000000 RDI: 0000000000000004 RBP: ffff8880131d42c0 R08: 0000000000000004 R09: 0000000000000001 R10: 0000000000000001 R11: 000000000008c07e R12: 0000000000000001 R13: 0000000000000000 R14: dffffc0000000000 R15: 00000050edb75a81 reset_page_owner include/linux/page_owner.h:24 [inline] free_pages_prepare mm/page_alloc.c:1458 [inline] free_pcp_prepare+0x65c/0xd90 mm/page_alloc.c:1508 free_unref_page_prepare mm/page_alloc.c:3386 [inline] free_unref_page+0x19/0x4d0 mm/page_alloc.c:3482 __vunmap+0x85d/0xd30 mm/vmalloc.c:2713 __vfree+0x3c/0xd0 mm/vmalloc.c:2761 vfree+0x5a/0x90 mm/vmalloc.c:2792 copy_entries_to_user net/ipv4/netfilter/arp_tables.c:713 [inline] get_entries net/ipv4/netfilter/arp_tables.c:867 [inline] do_arpt_get_ctl+0x7ad/0x8f0 net/ipv4/netfilter/arp_tables.c:1453 nf_getsockopt+0x72/0xd0 net/netfilter/nf_sockopt.c:116 ip_getsockopt+0x185/0x1e0 net/ipv4/ip_sockglue.c:1796 tcp_getsockopt+0x95/0xf0 net/ipv4/tcp.c:4398 __sys_getsockopt+0x216/0x690 net/socket.c:2296 __do_sys_getsockopt net/socket.c:2311 [inline] __se_sys_getsockopt net/socket.c:2308 [inline] __x64_sys_getsockopt+0xba/0x150 net/socket.c:2308 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f394fe8bbca RSP: 002b:00007ffc864ae3e8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 RAX: ffffffffffffffda RBX: 00007ffc864ae3fc RCX: 00007f394fe8bbca RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000003 RBP: 0000000000000003 R08: 00007ffc864ae3fc R09: ffffffffffff0000 R10: 00007ffc864ae450 R11: 0000000000000212 R12: 00007ffc864ae450 R13: 0000000000054d72 R14: 0000000000000002 R15: 00007ffc864aeb60 task:syz-executor.5 state:R running task stack:25056 pid:3644 ppid:3635 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5194 [inline] __schedule+0xbd2/0x55b0 kernel/sched/core.c:6506 preempt_schedule_irq+0x4e/0x90 kernel/sched/core.c:6818 irqentry_exit+0x31/0x80 kernel/entry/common.c:432 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:write_comp_data+0x7/0x90 kernel/kcov.c:230 Code: ff 00 75 10 65 48 8b 04 25 80 6f 02 00 48 8b 80 88 15 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 65 8b 05 b9 df 85 7e <49> 89 f1 89 c6 49 89 d2 81 e6 00 01 00 00 49 89 f8 65 48 8b 14 25 RSP: 0018:ffffc90004b7faa0 EFLAGS: 00000202 RAX: 0000000080000000 RBX: 0000000000000063 RCX: ffffffff81da7df4 RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 RBP: ffffc90004b7fc88 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000040 R13: ffff888058f405e0 R14: ffffc90004b7fcc0 R15: ffffc90004b7fc98 lookup_fast+0x74/0x520 fs/namei.c:1619 walk_component+0x5e/0x5a0 fs/namei.c:1989 link_path_walk.part.0+0x74e/0xe20 fs/namei.c:2320 link_path_walk fs/namei.c:2245 [inline] path_parentat+0xa8/0x1b0 fs/namei.c:2521 filename_parentat+0x1c3/0x5a0 fs/namei.c:2544 do_unlinkat+0xc4/0x650 fs/namei.c:4268 __do_sys_unlink fs/namei.c:4345 [inline] __se_sys_unlink fs/namei.c:4343 [inline] __x64_sys_unlink+0xc6/0x110 fs/namei.c:4343 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7ff747289ee7 RSP: 002b:00007fff4f689698 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff747289ee7 RDX: 00007fff4f6896d0 RSI: 00007fff4f6896d0 RDI: 00007fff4f689760 RBP: 00007fff4f689760 R08: 0000000000000001 R09: 00007fff4f689530 R10: 0000555556117923 R11: 0000000000000206 R12: 00007ff7472e45f6 R13: 00007fff4f68a820 R14: 0000555556117810 R15: 00007fff4f68a860 rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g19133 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 rcu: Possible timer handling issue on cpu=0 timer-softirq=20047 rcu: rcu_preempt kthread starved for 10502 jiffies! g19133 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. rcu: RCU grace-period kthread stack dump: task:rcu_preempt state:I stack:29280 pid:17 ppid:2 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5194 [inline] __schedule+0xbd2/0x55b0 kernel/sched/core.c:6506 schedule+0xda/0x1b0 kernel/sched/core.c:6582 schedule_timeout+0x14a/0x2a0 kernel/time/timer.c:1935 rcu_gp_fqs_loop+0x190/0x910 kernel/rcu/tree.c:1658 rcu_gp_kthread+0x236/0x360 kernel/rcu/tree.c:1857 kthread+0x2e4/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 rcu: Stack dump where RCU GP kthread last ran: Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 2976 Comm: udevd Not tainted 6.0.0-rc6-next-20220923-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 RIP: 0010:debug_spin_unlock kernel/locking/spinlock_debug.c:99 [inline] RIP: 0010:do_raw_spin_unlock+0x2e/0x230 kernel/locking/spinlock_debug.c:140 Code: 00 00 00 fc ff df 41 55 41 54 55 48 89 fd 48 83 c7 04 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 <84> d2 0f 85 bb 01 00 00 81 7d 04 ad 4e ad de 0f 85 73 01 00 00 be RSP: 0018:ffffc90000007cc8 EFLAGS: 00000002 RAX: 0000000000000007 RBX: 0000000000000006 RCX: ffffffff815f9545 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff914cdfb4 RBP: ffffffff914cdfb0 R08: 0000000000000000 R09: ffffffff8de06717 R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880782a0340 R13: dffffc0000000000 R14: 1ffff92000000fa2 R15: ffffffff89ef0c00 FS: 00007f2a1a411840(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f77db7bb440 CR3: 0000000021703000 CR4: 00000000003506f0 Call Trace: __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:150 [inline] _raw_spin_unlock_irqrestore+0x1e/0x70 kernel/locking/spinlock.c:194 debug_object_activate+0x287/0x3e0 lib/debugobjects.c:693 debug_hrtimer_activate kernel/time/hrtimer.c:420 [inline] debug_activate kernel/time/hrtimer.c:475 [inline] enqueue_hrtimer+0x2b/0x470 kernel/time/hrtimer.c:1084 __run_hrtimer kernel/time/hrtimer.c:1702 [inline] __hrtimer_run_queues+0xc12/0xfb0 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1096 [inline] __sysvec_apic_timer_interrupt+0x17c/0x640 arch/x86/kernel/apic/apic.c:1113 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1107 asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:649 RIP: 0010:check_kcov_mode kernel/kcov.c:173 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x7/0x60 kernel/kcov.c:207 Code: 34 00 5d be 03 00 00 00 e9 86 2f 9e 07 66 0f 1f 44 00 00 48 8b be a8 01 00 00 e8 b4 ff ff ff 31 c0 c3 90 65 8b 05 39 db 85 7e <89> c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b 14 25 80 6f 02 00 a9 RSP: 0018:ffffc9000319fcf8 EFLAGS: 00000287 RAX: 0000000080000000 RBX: ffffc9000319fe98 RCX: ffffffff81dc633b RDX: ffff88807dde9d40 RSI: 0000000000000000 RDI: 0000000000000006 RBP: 000000000000000d R08: 0000000000000006 R09: 0000555a7b459998 R10: 00007fffffffefb0 R11: 0000000000000001 R12: 0000000000000028 R13: ffffffff8a4728a0 R14: 0000555a7b459998 R15: 0000000000000050 stac arch/x86/include/asm/smap.h:39 [inline] user_access_begin arch/x86/include/asm/uaccess.h:552 [inline] filldir64+0x1de/0x690 fs/readdir.c:331 dir_emit include/linux/fs.h:3554 [inline] kernfs_fop_readdir+0x39c/0x910 fs/kernfs/dir.c:1805 iterate_dir+0x56a/0x6f0 fs/readdir.c:65 __do_sys_getdents64 fs/readdir.c:369 [inline] __se_sys_getdents64 fs/readdir.c:354 [inline] __x64_sys_getdents64+0x13a/0x2c0 fs/readdir.c:354 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f2a1a4ff097 Code: 00 00 0f 05 eb b3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 81 fa ff ff ff 7f b8 ff ff ff 7f 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 b1 5d 0f 00 f7 d8 64 89 02 48 RSP: 002b:00007fff928b3b78 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 RAX: ffffffffffffffda RBX: 0000555a7b4595c0 RCX: 00007f2a1a4ff097 RDX: 0000000000008000 RSI: 0000555a7b4595f0 RDI: 000000000000000d RBP: 0000555a7b4595f0 R08: 0000000000000030 R09: 00007f2a1a5f5a60 R10: 0000000001000000 R11: 0000000000000293 R12: fffffffffffffe68 R13: 0000555a7b4595c4 R14: 0000000000000002 R15: 0000000000000000